Andrew Morris of GreyNoise Intelligence made an important decision when he began relying on IPinfo’s API in 2017.

Since then, GreyNoise has become recognized as the go-to Anti-Threat Intelligence source, providing ground truth on Internet-wide scan and attack activity for thousands of businesses and users. Read on to learn about how IPinfo helped make it a success.

  • Client
    Andrew Morris (Founder/CEO)
  • Company
    GreyNoise Intelligence (greynoise.io)
  • Customer Since
    2017
  • APIs Used
    ASN, Geolocation

The Problem

How do you contextualize the growing numbers of scanners, crawlers, and bots across the Internet?

In 2017, Andrew Morris founded GreyNoise Intelligence with a simple question in mind: Why should the background noise of the Internet be so loud?

GreyNoise creates sets of data that can be used to filter or deprioritize traffic from omnidirectional background scanners, allowing businesses to focus on targeted scan and attack traffic. It helps differentiate between packets that are being sprayed indiscriminately across the Internet and traffic that may have more malicious intent.

To do this, GreyNoise collects tens of thousands of IP addresses each day. In 2018 alone, it dealt with 12 million IPs across 29,070 different ASNs.

An important part of GreyNoise’s workflow is to make categorizations and inferences based on the data behind each IP address interacted with. This meant that GreyNoise had to find an IP address data provider that was trustworthy, accurate, and reliable.

We needed to further contextualize Internet scanners, crawlers, and bots. Origin networks, data centers, ASNs, and countries are a huge component of that.

— Andrew Morris

The Process

GreyNoise needed an IP address data provider that was head and shoulders above alternatives.

After trying several IP geolocation services and using an internal REST API to query multiple unwieldy, open data providers and Internet registries, GreyNoise decided to continue its search for the right API partner. With the help of a friend, GreyNoise’s CEO came across IPinfo.

Although GreyNoise uses multiple sources to enrich its data, it recognized multiple factors that made IPinfo stand out from the rest:

  • Price
  • Uptime
  • Features

We were looking for a faster, more developer-friendly alternative to existing geo-IP providers. A close friend of mine hit the IPinfo API with cURL, and I saw all the information we needed.

— Andrew Morris

The Solution

After giving IPinfo a chance, GreyNoise decided that it was a perfect fit.

With millions of IP addresses that would depend on its accuracy, GreyNoise decided that IPinfo was a partner they could trust in.

Many of the tags (such as Googlebot, Bingbot, etc.) that our customers love are derived from IPinfo data at some point.

— Andrew Morris

The responsiveness of IPinfo’s API was a major selling point for GreyNoise. Not only did IPinfo offer the data that GreyNoise required, but accessing it was incredibly fast and straightforward.

Along with IP geolocation, IPinfo provided access to other endpoints that many competitors didn’t. These would help supplement the data that GreyNoise served to its users.

IPinfo’s ASN, IP ranges, and hosted domains APIs could help GreyNoise build upon its existing features. Because of this, GreyNoise chose to use IPinfo at one of the most important points of its system workflow.

The Result

IPinfo is a key contributor when it comes to the reliability of GreyNoise’s data.

In the cybersecurity industry, your business is nothing if not trustworthy. With valuable customers depending on its accuracy, GreyNoise has had nothing but great things to say about IPinfo’s services.

While partnered, GreyNoise has served over 50 million security alerts for ~2,000 community users and enterprise customers. IPinfo has played an important role along the way.

  • Thorough enrichment of all IP addresses observed by GreyNoise
  • Faster and more reliable IP address lookups compared to tested alternatives
  • Deriving tags (such as Googlebot, Bingbot, etc.) from the data IPinfo provides
  • Continued support and feedback from IPinfo’s team

GreyNoise also has plans to better customize its pricing page with regional information provided by IPinfo's Geolocation API. This is just one example of how IPinfo has continued to offer usefulness beyond the standard procedure.

100,000+ companies trust our data

IPInfo is absolutely essential to our business. The data is rock solid, the API is dead simple, and the price is unbeatable. I constantly recommend it to all of my friends in the industry.

Andrew Morris

Founder/CEO, GreyNoise

Need a way to fully investigate every IP address that touches your business?

Creating an account is free and you can get started with our API in just seconds.

We'd love to build a customized plan that fits your exact needs, so don't hesitate to reach out to us.